arXiv subjects

Bálint Gyevnár

Publications and source records attributed to Bálint Gyevnár.

5 recordsLinked to original sources

arXiv2026

Bridging the Gap in the Responsible AI Divides

Tensions between AI Safety (AIS) and AI Ethics (AIE) have created what we term a "responsible AI divide." This divide has been persistent, and has dominated the public and policy discourse on AI, and increasingly shapes how governments, firms, and researchers define responsible AI, and so which AI risks they prioritize, which they sideline, and which mitigation strategies they ultimately develop and implement. Here, we first introduce categorization with four major conceptual modes of possible engagement with these tensions: radical confrontation, disengagement, compartmentalized coexistence, and critical bridging. Second, we discuss the advantages and disadvantages of the modes of engagement. Third, we empirically analyze a well-curated set of 3555 research papers roughly representing AIS and AIE. Using computational tools and qualitative analyses, we map the research landscapes of AIE and AIS. We observe that there are several shared research problems between AIE and AIS. However, there are also several thematic divides. For example, we find that AIE has long grappled with problems related to injustice incurred by AI and tangible AI harms, whereas AIS has primarily embodied an anticipatory approach focused on mitigating risks from AI capabilities. At the same time, we find significant overlap in core research concerns across AIE and AIS regarding transparency, reproducibility, and inadequate governance mechanisms. Based on our empirical observations, we claim that critical bridging, with a focus on bridging problems, offers one viable, constructive path for advancing responsible AI. We conclude by identifying bridging problems as a foundation for collaborative AI governance, offering concrete recommendations for integrating shared considerations into responsible AI practice, discussing the limitations of critical bridging, and outlining open problems for future research.

cs.CY↗

arXiv2026

greCAPTCHA: Assessing Understanding as Evidence of Research Authorship Under Generative AI

Conferences, journals, funders, schools, and universities are struggling with a surge of potentially AI-generated submissions from ostensibly human authors, who may not have exercised sufficient human oversight for their manuscripts. In turn, institutions evaluating submissions can no longer reliably credit expertise based solely on authors' names on submitted work. To address this problem, we propose greCAPTCHA, a proctored assessment approach that measures authors' understanding of research manuscripts via the construct of capacity to verify, which we define as the knowledge and reasoning required to critically assess the contents underlying one's contributions to a manuscript. greCAPTCHA generates questions assessing multiple levels of understanding and provides an evaluative report based on authors' responses. Using a prototype implementation, we conduct a user study and semi-structured interviews with $31$ researchers to evaluate greCAPTCHA. Its automated scores predict which papers were or were not authored by study participants with an AUC of $0.90$. Participants reported positive overall experiences with the system and remarked on the appropriate construct validity for author understanding, while also suggesting important changes to be made before deployment. Our results provide initial evidence that greCAPTCHA can assess manuscript-specific understanding under proctored conditions.

cs.DL↗

arXiv2026

Evaluating RL Explainability Methods by How Much They Help Fix Bugs in Agents

This preliminary paper outlines a planned evaluation benchmark for Explainable Reinforcement Learning (XRL) methods. Current evaluations rely on functionally-grounded metrics like faithfulness and compactness, and on human-grounded proxies like subjective ratings or prediction accuracy. We suggest evaluating XRL methods by how effectively their generated explanations help to diagnose and fix malfunctioning reinforcement learning (RL) agents. We propose EvalXRL, a benchmark in which a Large Language Model (LLM) coding agent uses different XRL methods to diagnose a held-out malfunction in an RL agent, and then repair it. Our proposed benchmark iterates across (environment $\times$ malfunction $\times$ XRL method) tuples and uses the reward signal of the RL agents to form a final score for each XRL method. The coding agent may use the method interactively: invoke the XRL method, process its output, form new hypotheses on what is broken, and invoke the method again with parameters adjusted for testing these hypotheses. This closed-loop structure may be described as a simplified version of the scientific method. Some XRL methods provide self-evaluations that follow this pattern; we propose the first head-to-head comparison of multiple XRL methods in closed-loop usage.

cs.LG↗

arXiv2026

Distributed Denial of Science: How Indirect Data Poisoning of AI Systems Can Industrialize Scientific Fraud

Scientific fraud is the instrument of doubt that malicious entities can use to establish controversy in science. Historically, it required the resources of a company: deep pockets, ghostwritten articles, and corrupt academics. Today, Artificial Intelligence (AI) is increasingly automating scientific research, so we ask: Can a remote adversary weaponize the honest use of AI in science to compromise scientific integrity? We envision and empirically evaluate a new attack, indirect data poisoning, in which an adversary corrupts an open dataset and uploads the poisoned variant to a public repository. Autonomous research agents may independently retrieve and process this data, turning honest scientists into the unpaid and unwitting distributors of fraud at scale. Across five socially-salient topics, from hiring discrimination to the safety of autonomous vehicles, three widely used frontier AI systems (Claude Code with Claude Opus 4.7, Codex with GPT-5.5, Gemini CLI with Gemini 3.1 Pro), and 450 ethically contained experimental runs, we find that poisoning succeeds in 49.56% of runs, while the rate of poisoning detection is only 6.0%. The attack requires no topic-specific trigger-words, agent access, indirect prompt injection, or fabricated papers, only the open data ecosystem and misleading metadata. To mitigate the attacks, we propose and evaluate two measures: a scientist persona and a data provenance audit with five checks (referencing papers, social markers, statistical anomalies, related datasets, poisoning caution). We find that the persona still leaves 16.67% of runs with a poisoned conclusion, but provenance auditing reduces attack success rate to zero. Our results suggest that indirect data poisoning may enable scientific fraud at unprecedented scale, but these attacks can be mitigated with suitable auditing by agents during data retrieval.

cs.CR↗

arXiv2025

Integrating Counterfactual Simulations with Language Models for Explaining Multi-Agent Behaviour

Autonomous multi-agent systems (MAS) are useful for automating complex tasks but raise trust concerns due to risks such as miscoordination or goal misalignment. Explainability is vital for users' trust calibration, but explainable MAS face challenges due to complex environments, the human factor, and non-standardised evaluation. Leveraging the counterfactual effect size model and LLMs, we propose Agentic eXplanations via Interrogative Simulation (AXIS). AXIS generates human-centred action explanations for multi-agent policies by having an LLM interrogate an environment simulator using prompts like 'whatif' and 'remove' to observe and synthesise counterfactual information over multiple rounds. We evaluate AXIS on autonomous driving across ten scenarios for five LLMs with a comprehensive methodology combining robustness, subjective preference, correctness, and goal/action prediction with an external LLM as evaluator. Compared to baselines, AXIS improves perceived explanation correctness by at least 7.7% across all models and goal prediction accuracy by 23% for four models, with comparable action prediction accuracy, achieving the highest scores overall. Our code is open-sourced at https://github.com/gyevnarb/axis.

cs.AI↗